Just found out a way! Here is my solution for those curious.
Looks like strapi is global and can be access anywhere.
const entity = await strapi.entityService.update(
"plugin::users-permissions.user",
ctx.state.user.id,
{ data }
);